Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: lFoFnrFzXyVuJXlPdA5i6DhM5KgW3mxv0z6lBcKsxts=
Subject key identifier: F3:AE:7B:EB:0E:2D:5A:D4:DC:A8:59:27:98:FB:CC:21:16:10:D1:56
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 019CABA22AD51DE200A1B81B4840071E2C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:00:57 +0000
Manifest this update: Sun 01 Mar 2026 23:00:57 +0000
Manifest next update: Mon 02 Mar 2026 23:00:57 +0000
Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: fZY0PYkLs2hdA3qXQIk+eE7NT8ZAdvJMMCQKD8znbUQ=)
2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2a:d5:1d:e2:00:a1:b8:1b:48:40:07:1e:2c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Mar 1 23:00:57 2026 GMT
Not After : Mar 2 23:00:57 2026 GMT
Subject: CN=f3ae7beb0e2d5ad4dca8592798fbcc211610d156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:e1:9f:37:18:d6:55:30:34:c4:60:9f:4a:
9a:91:88:be:fd:db:d6:5c:07:4d:48:be:f9:a5:6c:
bf:80:e7:9b:56:0b:a7:a5:fb:0f:3e:b6:fc:2a:0a:
6b:0e:1d:54:33:fd:b8:18:e4:77:4b:ef:1e:9e:0f:
02:44:e1:4d:86:e1:15:25:d0:24:76:41:f0:c7:f7:
4d:ce:3b:cc:fa:f2:e1:85:80:64:d7:b3:67:a7:b4:
d3:f6:6a:33:b1:23:31:25:1e:7b:06:69:c6:4e:f0:
1d:d2:fb:ea:aa:6f:1a:ea:8e:04:3e:72:84:44:6b:
1a:51:2e:51:c1:60:47:04:4c:b9:42:0d:34:83:30:
f3:2c:b6:d1:bc:a8:5d:9c:6e:e6:3a:db:09:34:cc:
95:ba:2a:01:9a:77:50:b5:04:3a:02:48:16:2e:6f:
de:02:5a:12:7b:20:ba:6d:79:41:02:ca:b0:9d:c4:
e9:2e:8b:cd:5d:6e:bf:bc:6d:f8:c0:83:a4:89:65:
08:e9:98:5c:a4:2a:a8:3d:6c:94:60:6b:bc:83:ce:
c5:18:20:d1:df:de:46:a0:7b:40:62:4a:46:f6:56:
82:fb:17:52:36:29:dd:50:43:b5:ed:60:da:f3:04:
20:62:02:76:25:f5:a5:67:f2:1f:01:fe:7c:d0:c9:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:7B:EB:0E:2D:5A:D4:DC:A8:59:27:98:FB:CC:21:16:10:D1:56
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:01:e4:d2:80:10:8f:11:37:91:06:4c:a6:b0:8f:4b:85:a9:
66:c3:6d:67:8a:c9:29:bc:2d:a2:06:1a:80:b6:62:bc:43:46:
0b:a7:b9:42:7e:8f:a6:5e:b6:6c:41:c6:5e:90:a5:30:36:16:
76:3d:b4:d9:e3:86:a1:0a:30:ff:a9:50:07:5f:a3:d7:d6:c8:
c5:73:74:bf:54:6b:2b:ad:06:14:fb:2b:2e:b8:5b:a8:5c:eb:
a7:21:e7:fc:9a:ea:4a:48:d2:5a:4a:68:d7:f3:05:53:f1:54:
da:2f:28:41:ef:a8:f9:4e:2a:e7:d4:19:29:f6:3a:c9:a5:46:
be:18:74:aa:b3:fb:bf:c6:2b:77:a5:cf:a4:10:54:9c:cc:61:
e3:69:e5:5f:1a:f9:16:6e:0e:98:4d:ce:23:d6:d3:97:22:b6:
18:4a:69:c4:ac:60:f9:15:1e:fa:b7:4f:b0:aa:9a:ba:d8:5a:
02:fd:be:c6:9b:ab:f9:c0:7c:bd:de:4f:14:57:0f:70:88:57:
1b:d5:6f:b6:18:06:52:8f:fb:5d:a4:5c:31:86:ae:5a:d3:7a:
28:15:49:6e:db:d6:80:f4:c9:cc:9c:f9:53:66:1f:04:5e:f2:
55:c7:7d:12:61:0a:df:60:07:61:91:0b:07:e3:2b:b6:2e:67:
53:ed:73:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:49 2026 by rpki-client